Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/C01FDA868C9911F18503E1DCCE1D38B0.roa
File: C01FDA868C9911F18503E1DCCE1D38B0.roa (raw, json)
Hash identifier: kQtLsW7D9ICZ09fDE52xx9CZ7qcYPPsGFlQk50LU9yY=
Subject key identifier: F3:D4:4E:5E:35:77:20:22:57:E1:E2:55:B6:C3:9D:AB:97:E4:F2:40
Certificate issuer: /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial: 08F6
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/C01FDA868C9911F18503E1DCCE1D38B0.roa
Signing time: Fri 31 Jul 2026 04:39:01 +0000
ROA not before: Fri 31 Jul 2026 04:38:56 +0000
ROA not after: Tue 12 Aug 2031 04:38:56 +0000
asID: 37468
IP address blocks: 102.219.124.0/22 maxlen: 24
2c0f:f828::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 11 Aug 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Validity
Not Before: Jul 31 04:38:56 2026 GMT
Not After : Aug 12 04:38:56 2031 GMT
Subject: CN=6a6c26e5-ca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:9f:b4:54:59:6f:80:72:3f:64:5a:6c:41:
cd:79:ef:25:78:e0:8d:cd:f5:d9:5f:4d:04:33:b8:
9f:15:52:35:e1:18:1a:75:56:a1:2a:7d:5a:b2:76:
c6:f4:76:66:ac:bd:3d:e3:6d:b6:a5:68:01:c3:d8:
0f:93:1b:a0:fc:1b:6d:86:fa:10:ee:c0:92:7c:19:
83:50:47:6d:c6:33:ea:07:ff:0a:92:b5:53:81:68:
9a:18:c5:7a:14:b7:fb:3d:56:40:29:42:23:60:de:
c0:17:a2:16:4f:84:c5:6e:23:d0:d2:c6:f1:59:7e:
92:b0:b3:26:4f:d8:f8:4e:2b:12:bf:b6:df:47:66:
b7:38:97:79:a9:86:d0:ec:94:ed:34:76:ca:20:3f:
99:f2:0d:78:e7:cb:5f:e5:ea:a3:18:e6:bd:2e:8f:
aa:49:74:31:a8:e8:51:8c:9e:2b:a5:e3:a2:c8:91:
80:37:3b:22:03:8d:7f:16:c0:fa:9b:35:3a:30:58:
60:4a:36:8d:eb:70:fc:5d:29:a6:81:d0:d9:46:9f:
04:7b:cb:a1:35:0d:06:4a:cb:12:04:b5:d4:8d:8c:
00:bb:04:c3:58:28:03:18:e7:86:68:bc:8d:e0:77:
9d:f9:e2:2a:29:91:d2:01:c9:df:af:04:9f:cd:c8:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D4:4E:5E:35:77:20:22:57:E1:E2:55:B6:C3:9D:AB:97:E4:F2:40
X509v3 Authority Key Identifier:
keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/C01FDA868C9911F18503E1DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.124.0/22
IPv6:
2c0f:f828::/32
Signature Algorithm: sha256WithRSAEncryption
1c:b9:9e:a5:9a:fd:9b:d1:f1:e4:b1:af:a1:c1:d6:68:ee:78:
d7:19:b2:13:63:fa:48:cc:e7:c9:16:d3:4f:1e:2e:84:d0:4f:
86:a0:04:73:64:1c:4f:ea:01:7f:75:de:51:50:41:da:ad:62:
16:33:14:e8:31:15:7b:ce:8d:ac:5e:3e:7e:9f:9f:7a:69:05:
09:b3:a7:c2:0d:da:61:3b:90:23:d0:7f:01:73:24:74:3d:d0:
a1:d2:93:22:78:62:6d:71:ff:6c:f8:f8:f7:4e:5c:0a:b4:1f:
da:b7:b7:30:f9:b8:9b:a5:ed:d4:a4:92:0a:84:55:91:c7:a4:
4c:2c:08:62:d2:66:b8:c7:cd:c1:2c:e8:0e:d2:82:64:2b:3a:
ca:c6:73:25:c4:8b:ca:ce:fb:11:2d:d3:23:6b:64:79:d6:a0:
00:3b:00:26:bd:c1:56:7e:f9:fe:63:20:4e:7d:f1:e7:06:0b:
ab:f8:26:12:33:1b:f7:ad:53:37:c0:1d:b4:11:55:b5:9b:31:
51:69:ba:ca:36:31:da:d2:31:48:17:f4:de:17:36:2b:42:e9:
a9:1d:16:32:17:5b:c3:88:f9:9a:e8:21:d0:9f:f3:65:fa:b7:
98:bf:64:cd:3f:b1:e2:f3:cb:c3:0a:02:5d:0f:e2:f4:d3:3c:
4a:a3:fb:69
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjZDNUJBRjExMC8GA1UEBRMoMkNERjU4MEUzNzY3NTVCMUY4QzY4ODA4NDIxMjZE
RDYzREQ3NEVFNzAeFw0yNjA3MzEwNDM4NTZaFw0zMTA4MTIwNDM4NTZaMBgxFjAU
BgNVBAMTDTZhNmMyNmU1LWNhMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfDp+0VFlvgHI/ZFpsQc157yV44I3N9dlfTQQzuJ8VUjXhGBp1VqEqfVqy
dsb0dmasvT3jbbalaAHD2A+TG6D8G22G+hDuwJJ8GYNQR23GM+oH/wqStVOBaJoY
xXoUt/s9VkApQiNg3sAXohZPhMVuI9DSxvFZfpKwsyZP2PhOKxK/tt9HZrc4l3mp
htDslO00dsogP5nyDXjny1/l6qMY5r0uj6pJdDGo6FGMniul46LIkYA3OyIDjX8W
wPqbNTowWGBKNo3rcPxdKaaB0NlGnwR7y6E1DQZKyxIEtdSNjAC7BMNYKAMY54Zo
vI3gd5354iopkdIByd+vBJ/NyNkdAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQU89RO
XjV3ICJX4eJVtsOdq5fk8kAwHwYDVR0jBBgwFoAULN9YDjdnVbH4xogIQhJt1j3X
TucwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2QzVCL0VFNkFEQ0MyQ0RGNzExRUFBNUFFRDI0NEY4QUVBMjI4L0xOOVlE
amRuVmJINHhvZ0lRaEp0MWozWFR1Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xOOVlEamRuVmJINHhvZ0lRaEp0MWozWFR1Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI2QzVCL0VFNkFEQ0MyQ0RGNzExRUFBNUFFRDI0NEY4
QUVBMjI4L0MwMUZEQTg2OEM5OTExRjE4NTAzRTFEQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm23wwDQQCAAIwBwMFACwP
+CgwDQYJKoZIhvcNAQELBQADggEBABy5nqWa/ZvR8eSxr6HB1mjueNcZshNj+kjM
58kW008eLoTQT4agBHNkHE/qAX913lFQQdqtYhYzFOgxFXvOjaxePn6fn3ppBQmz
p8IN2mE7kCPQfwFzJHQ90KHSkyJ4Ym1x/2z4+PdOXAq0H9q3tzD5uJul7dSkkgqE
VZHHpEwsCGLSZrjHzcEs6A7SgmQrOsrGcyXEi8rO+xEt0yNrZHnWoAA7ACa9wVZ+
+f5jIE598ecGC6v4JhIzG/etUzfAHbQRVbWbMVFpuso2MdrSMUgX9N4XNitC6akd
FjIXW8OI+ZroIdCf82X6t5i/ZM0/seLzy8MKAl0P4vTTPEqj+2k=
-----END CERTIFICATE-----
Generated at Sun Aug 9 16:46:11 2026 by rpki-client